What are the risks associated with logging too many events

Assignment Help Computer Network Security

Reference no: EM132261879

Question: Properly configuring and collecting audit logs requires meticulous care.

Complete the Practice Lab titled "Audit Logs."

Capture screenshots taken during the lab in your Microsoft® Word document as specified within the lab instructions.

At the end of the lab, you will be asked to respond to the following in a 2- to 2.5-page response at the end of your Microsoft® Word document:

• Describe what information was contained in the logs and what value they might have in a security investigation.

• Think about the challenges of getting all of the Active Directory audit policy settings right. For an infrastructure administrator, how important are these types of settings?

• What are the risks associated with logging too little data or not auditing the correct events?

• What are the risks associated with logging too many events?

• When the default configuration is to create audit logs, what impact can this have on security incident investigations?

• This was just a single domain with two systems on a local LAN. How much more complicated would auditing and log management be for 100 computers? What about an enterprise with 10,000 computers in several domains on their LAN/WAN?

• Consider a cloud-hosted Infrastructure as a Service (IaaS) environment with many new, internet-accessible systems regularly being built and brought online. What challenges might there be managing audit policies and logs in such an environment?

• Finally, conclude this week's assignment with a page explaining how the tools and processes demonstrated in the labs might be used by an infrastructure administrator to help secure an environment.

Submit your assignment using the Assignment Files tab.

Reference no: EM132261879

Questions Cloud

The goal-the process of ongoing improvement : The Goal: The Process of Ongoing Improvement has been a highly recommended read for managers as it describes a realistic,

What biblical principles are applicable in the given areas : One of the key aims of network security is to implement privacy and confidentiality for data as it traverses the network. What biblical principles.

List the pros-cons and usefulness of the dissonance theory : List the Pros, Cons, and usefulness of the Dissonance Theory?

Osha standards and state or local building : As a safety professional, how would you respond to the overlap in OSHA standards and state or local building, electrical and life safety codes?

What are the risks associated with logging too many events : What are the risks associated with logging too many events? When the default configuration is to create audit logs, what impact can this have on security.

Excellence and integrity required of excellent leaders : explain how it will help you achieve the qualities professional excellence and integrity required of excellent leaders.

What elements of organizational culture are most important : Do you think organizational cultures can span generations? Do you think it is possible to change an organizational culture? Why or why not?

Give description of the business problem : Give description of the Business Problem/ Opportunity you Plan to Address and a General Description of your Strategy.

Pros-cons and usefulness of the social impact theory : List the Pros, Cons, and usefulness of the Social Impact Theory?

User Account

All Pages